last executing test programs: 3.016498843s ago: executing program 0 (id=38): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)={0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f000000b600), 0x8000, 0x0) ioctl$BLKCLOSEZONE(r2, 0x40101287, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0xe9, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x144]}}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), 0x4) 3.016315983s ago: executing program 0 (id=39): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000fe0000002000000001"], 0x30}], 0x1}, 0x0) 3.016169703s ago: executing program 0 (id=40): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="993f3b", 0x3, 0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) close_range(r3, 0xffffffffffffffff, 0x0) 2.406567735s ago: executing program 0 (id=49): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000b00)=0x6, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 1.944435589s ago: executing program 0 (id=57): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000004}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001100add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001016401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 1.944325149s ago: executing program 3 (id=58): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="993f3b", 0x3, 0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) close_range(r3, 0xffffffffffffffff, 0x0) 1.610129766s ago: executing program 2 (id=66): keyctl$setperm(0x5, 0x0, 0x6203000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@redirect_dir_off}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000140)="5d792626685988f39948daa6dc08b04a62d77be71a840f366241a2d3d18bf48fc553ae823605d28dc8430659310579ebc5be86d7718b6eadb6ba87936df9172b6a466458", 0x44}, 0x68) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)={0x110, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x0, [@nested={0xf9, 0xc7, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}, @nested={0x4d, 0x6c, 0x0, 0x1, [@nested={0x4, 0x150}, @nested={0x4, 0xa8}, @nested={0x4, 0x148}, @generic="437928b853e7c08502f62f0c86d4d39ac3", @typed={0xc, 0x23, 0x0, 0x0, @u64=0x49b91b62}, @typed={0x4, 0x34}, @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x5}]}, @typed={0x8, 0xf8, 0x0, 0x0, @fd=r3}, @generic="dbb07465ce00ce7f41c05614d6d0993fa4cc230a83e6c323fdaf7b5c58b9712b42f213d3efe3b6f5dc71318d87c5ded9de158021378d666a8a4f1d4bb726fcb15b60ba0d687d5a55b4dca8029a8f02bf5a21b4a5db0c9ef7bc59d593674844a09ee4c64f6bf69bdba5eb1a4bcf00053704417fd4d8fc7d357772049a9950de1434d5b12ff9da3ead7a3db6de891ce8dfe04696d08c"]}]}]}, 0x110}], 0x1}, 0x20000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800c080}, 0x40c0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x10, r5, 0x10000000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000003a00)=0x27, 0x4) 1.466310794s ago: executing program 2 (id=69): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/113, 0x71}, {&(0x7f0000000ac0)=""/7, 0x7}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x7}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc81d}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x120, 0x0) 1.466095754s ago: executing program 2 (id=70): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 1.464546674s ago: executing program 2 (id=72): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000780)=""/103, 0x67}, {0x0}, {&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000cc0)=""/244, 0xf4}, {0x0}, {0x0}, {&(0x7f0000000680)=""/97, 0x61}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 1.437145695s ago: executing program 2 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.386026748s ago: executing program 2 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xd91}) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="080029004101"], 0x28}], 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYRESOCT, @ANYBLOB="311cd45610fa317fd04a256e437d0f1402eab6aab7cc78bd9c694fa29311c43c", @ANYRES8=r3, @ANYRES16=r2], 0x0) 1.107327292s ago: executing program 3 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x87000000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)={0x200000, 0x48201003, 0x2e, 0x6, 0x0, 0x8000}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc25c, 0x2, 0x3}, 0x18, 0x1) landlock_restrict_self(r0, 0x2) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x1}, 0x18, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) renameat2(r1, &(0x7f00000000c0)='./file0/file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x4) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) 1.107005692s ago: executing program 0 (id=80): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000388f9c840f0037f0fac2d01020301090224000172161006090414e802447f000109230102ff03fd10030905ca0210"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x45f5cb4379c34ea3, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x880, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x1, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 997.658578ms ago: executing program 3 (id=81): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 978.123459ms ago: executing program 3 (id=82): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000004580)=""/4094, 0xffe}, {&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000cc0)=""/244, 0xf4}, {0x0}, {0x0}, {&(0x7f0000000680)=""/97, 0x61}], 0x8}, 0x5e}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 960.79634ms ago: executing program 3 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 833.917757ms ago: executing program 1 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000b00)=0x6, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 647.912517ms ago: executing program 3 (id=88): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000004}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001100add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001016401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000060000000000000009000000000000000000000000000000050000000000000008000000000c280009000000000000000000000000000000000000000000000e77fefbb8793e910002000000000000000002000000000000010001000000000084010500ac1414aa000000000000000000000000000000003300000000000000640101000000e6128961000000000000fe34000000000000000000000000000040200000ac1414bb000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000004d56c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010043f08ba67bc16ece00000000000000000000000000ffffac1414aa0000000001"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 572.30078ms ago: executing program 1 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="993f3b", 0x3, 0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) close_range(r3, 0xffffffffffffffff, 0x0) 46.283608ms ago: executing program 1 (id=90): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, r0, 0x6a98047402e98331, 0x70bd21, 0xff9f, {0x19, 0x0, 0x800e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) 19.907279ms ago: executing program 1 (id=91): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 19.303109ms ago: executing program 1 (id=92): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000004580)=""/4094, 0xffe}, {&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000cc0)=""/244, 0xf4}, {0x0}, {0x0}, {&(0x7f0000000680)=""/97, 0x61}], 0x8}, 0x5e}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 0s ago: executing program 1 (id=93): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (fail_nth: 8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 29.058855][ T36] audit: type=1400 audit(1777134897.420:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.059887][ T283] cgroup: Unknown subsys name 'net' [ 29.081651][ T36] audit: type=1400 audit(1777134897.420:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.109020][ T36] audit: type=1400 audit(1777134897.450:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.109236][ T283] cgroup: Unknown subsys name 'devices' [ 29.287872][ T283] cgroup: Unknown subsys name 'hugetlb' [ 29.293496][ T283] cgroup: Unknown subsys name 'rlimit' [ 29.467320][ T36] audit: type=1400 audit(1777134897.830:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.490539][ T36] audit: type=1400 audit(1777134897.830:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.515319][ T36] audit: type=1400 audit(1777134897.830:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.524510][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.547294][ T36] audit: type=1400 audit(1777134897.910:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.572707][ T36] audit: type=1400 audit(1777134897.910:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.609065][ T36] audit: type=1400 audit(1777134897.970:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.634686][ T36] audit: type=1400 audit(1777134897.970:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.634936][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.437100][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.444172][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.451272][ T291] bridge_slave_0: entered allmulticast mode [ 30.457695][ T291] bridge_slave_0: entered promiscuous mode [ 30.464151][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.471222][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.478307][ T291] bridge_slave_1: entered allmulticast mode [ 30.484625][ T291] bridge_slave_1: entered promiscuous mode [ 30.526706][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.533766][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.540859][ T292] bridge_slave_0: entered allmulticast mode [ 30.547060][ T292] bridge_slave_0: entered promiscuous mode [ 30.554957][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.562053][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.569168][ T292] bridge_slave_1: entered allmulticast mode [ 30.575474][ T292] bridge_slave_1: entered promiscuous mode [ 30.607685][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.614754][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.621835][ T290] bridge_slave_0: entered allmulticast mode [ 30.628044][ T290] bridge_slave_0: entered promiscuous mode [ 30.634514][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.641727][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.648830][ T290] bridge_slave_1: entered allmulticast mode [ 30.655000][ T290] bridge_slave_1: entered promiscuous mode [ 30.696818][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.703895][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.710983][ T293] bridge_slave_0: entered allmulticast mode [ 30.717222][ T293] bridge_slave_0: entered promiscuous mode [ 30.740325][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.747474][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.754527][ T293] bridge_slave_1: entered allmulticast mode [ 30.760828][ T293] bridge_slave_1: entered promiscuous mode [ 30.874880][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.881991][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.889313][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.896814][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.906877][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.913935][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.921248][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.928324][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.948653][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.955724][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.963042][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.970094][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.980116][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.987971][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.995261][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.002347][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.055622][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.063221][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.070635][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.077940][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.085532][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.092822][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.116345][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.123408][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.131112][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.138168][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.147089][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.154140][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.162925][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.170074][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.182588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.189684][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.197508][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.204596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.266686][ T290] veth0_vlan: entered promiscuous mode [ 31.275505][ T292] veth0_vlan: entered promiscuous mode [ 31.283636][ T293] veth0_vlan: entered promiscuous mode [ 31.306832][ T293] veth1_macvtap: entered promiscuous mode [ 31.319076][ T292] veth1_macvtap: entered promiscuous mode [ 31.327395][ T290] veth1_macvtap: entered promiscuous mode [ 31.336760][ T291] veth0_vlan: entered promiscuous mode [ 31.375270][ T291] veth1_macvtap: entered promiscuous mode [ 31.388245][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.432481][ T311] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.447411][ T310] fuse: Unknown parameter '0x0000000000000003' [ 31.468255][ T311] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.468281][ T311] rust_binder: Read failure Err(EFAULT) in pid:2 [ 31.470059][ T310] overlayfs: failed to resolve './file2': -2 [ 31.559277][ T324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 31.570517][ T324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=324 comm=syz.3.7 [ 31.725208][ T346] fuse: Unknown parameter '0x0000000000000003' [ 31.732512][ T346] overlayfs: failed to resolve './file2': -2 [ 31.739371][ T348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 31.749575][ T348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=348 comm=syz.3.17 [ 31.776691][ T350] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.776721][ T350] rust_binder: Read failure Err(EFAULT) in pid:18 [ 31.890157][ T354] FAULT_INJECTION: forcing a failure. [ 31.890157][ T354] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.909991][ T354] CPU: 0 UID: 0 PID: 354 Comm: syz.3.20 Not tainted syzkaller #0 0f3775a9ea948f8f8f06e34e337f4a1c8395b27e [ 31.910027][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.910040][ T354] Call Trace: [ 31.910046][ T354] [ 31.910054][ T354] __dump_stack+0x21/0x30 [ 31.910085][ T354] dump_stack_lvl+0x140/0x1c0 [ 31.910109][ T354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.910133][ T354] ? do_vfs_ioctl+0x182d/0x2010 [ 31.910154][ T354] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 31.910184][ T354] dump_stack+0x19/0x20 [ 31.910209][ T354] should_fail_ex+0x3d7/0x530 [ 31.910235][ T354] should_fail+0xf/0x20 [ 31.910259][ T354] should_fail_usercopy+0x1e/0x30 [ 31.910286][ T354] _copy_from_user+0x20/0xa0 [ 31.910306][ T354] kvm_vm_ioctl+0x608/0xc60 [ 31.910333][ T354] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 31.910359][ T354] ? ioctl_has_perm+0x1bc/0x500 [ 31.910386][ T354] ? __asan_memcpy+0x5a/0x80 [ 31.910414][ T354] ? ioctl_has_perm+0x408/0x500 [ 31.910439][ T354] ? has_cap_mac_admin+0xd0/0xd0 [ 31.910465][ T354] ? proc_fail_nth_write+0x184/0x220 [ 31.910489][ T354] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 31.910514][ T354] ? selinux_file_ioctl+0x732/0x1480 [ 31.910541][ T354] ? vfs_write+0x9a4/0xf90 [ 31.910567][ T354] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 31.910594][ T354] ? __cfi_vfs_write+0x10/0x10 [ 31.910622][ T354] ? __kasan_check_write+0x18/0x20 [ 31.910649][ T354] ? mutex_unlock+0x90/0x240 [ 31.910677][ T354] ? __cfi_mutex_unlock+0x10/0x10 [ 31.910705][ T354] ? __fget_files+0x2c5/0x340 [ 31.910726][ T354] ? __fget_files+0x2c5/0x340 [ 31.910746][ T354] ? bpf_lsm_file_ioctl+0xd/0x20 [ 31.910768][ T354] ? security_file_ioctl+0x3e/0x110 [ 31.910794][ T354] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 31.910820][ T354] __se_sys_ioctl+0x132/0x1b0 [ 31.910840][ T354] __x64_sys_ioctl+0x7f/0xa0 [ 31.910860][ T354] x64_sys_call+0x1878/0x2ee0 [ 31.910888][ T354] do_syscall_64+0x57/0xf0 [ 31.910910][ T354] ? clear_bhb_loop+0x50/0xa0 [ 31.910936][ T354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.910959][ T354] RIP: 0033:0x7f6561b9cdd9 [ 31.910977][ T354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.910995][ T354] RSP: 002b:00007f6562a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.911020][ T354] RAX: ffffffffffffffda RBX: 00007f6561e15fa0 RCX: 00007f6561b9cdd9 [ 31.911046][ T354] RDX: 0000200000000080 RSI: 000000004010ae68 RDI: 0000000000000004 [ 31.911061][ T354] RBP: 00007f6562a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 31.911074][ T354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.911088][ T354] R13: 00007f6561e16038 R14: 00007f6561e15fa0 R15: 00007ffd882d14b8 [ 31.911106][ T354] [ 32.257264][ T361] netlink: 344 bytes leftover after parsing attributes in process `syz.3.23'. [ 32.298596][ T368] fuse: Unknown parameter '0x0000000000000003' [ 32.305190][ T368] overlayfs: failed to resolve './file2': -2 [ 32.323228][ T371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 32.333018][ T371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=371 comm=syz.1.27 [ 32.364761][ T373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.364950][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 32.385283][ T377] rust_binder: Error while translating object. [ 32.394423][ T377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.400838][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 32.452642][ T385] netlink: 440 bytes leftover after parsing attributes in process `syz.0.33'. [ 32.470694][ T385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 32.479698][ T385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 32.490577][ T385] netlink: 5 bytes leftover after parsing attributes in process `syz.0.33'. [ 32.501904][ T385] devpts: called with bogus options [ 32.554795][ T392] fuse: Unknown parameter '0x0000000000000003' [ 32.561710][ T392] overlayfs: failed to resolve './file2': -2 [ 32.582397][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 32.592716][ T394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=394 comm=syz.0.37 [ 32.626300][ T63] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.636534][ T398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 32.795925][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 32.802225][ T63] usb 4-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config [ 32.812553][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.822870][ T63] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.832034][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.840134][ T63] usb 4-1: Product: syz [ 32.845179][ T63] usb 4-1: Manufacturer: syz [ 32.849975][ T63] usb 4-1: SerialNumber: syz [ 32.928066][ T404] kvm: kvm [403]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 32.937052][ T404] kvm: kvm [403]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 33.060176][ T63] usb 4-1: 0:2 : does not exist [ 33.069725][ T63] usb 4-1: USB disconnect, device number 2 [ 33.090643][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.164491][ T413] fuse: Unknown parameter '0x0000000000000003' [ 33.173074][ T413] overlayfs: failed to resolve './file2': -2 [ 33.194423][ T415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=415 comm=syz.2.46 [ 33.329324][ T427] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 33.607498][ T437] fuse: Unknown parameter '0x0000000000000003' [ 33.617137][ T437] overlayfs: failed to resolve './file2': -2 [ 33.665949][ T439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=439 comm=syz.3.55 [ 33.748207][ T447] FAULT_INJECTION: forcing a failure. [ 33.748207][ T447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.761776][ T447] CPU: 0 UID: 0 PID: 447 Comm: syz.2.59 Not tainted syzkaller #0 0f3775a9ea948f8f8f06e34e337f4a1c8395b27e [ 33.761812][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.761825][ T447] Call Trace: [ 33.761831][ T447] [ 33.761839][ T447] __dump_stack+0x21/0x30 [ 33.761875][ T447] dump_stack_lvl+0x140/0x1c0 [ 33.761890][ T447] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.761906][ T447] ? check_stack_object+0x12b/0x150 [ 33.761923][ T447] dump_stack+0x19/0x20 [ 33.761937][ T447] should_fail_ex+0x3d7/0x530 [ 33.761953][ T447] should_fail+0xf/0x20 [ 33.761967][ T447] should_fail_usercopy+0x1e/0x30 [ 33.761983][ T447] _copy_to_user+0x24/0xa0 [ 33.761995][ T447] simple_read_from_buffer+0xed/0x160 [ 33.762010][ T447] proc_fail_nth_read+0x1aa/0x220 [ 33.762025][ T447] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 33.762039][ T447] ? bpf_lsm_file_permission+0xd/0x20 [ 33.762054][ T447] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 33.762068][ T447] vfs_read+0x289/0xcb0 [ 33.762084][ T447] ? __cfi_vfs_read+0x10/0x10 [ 33.762100][ T447] ? __kasan_check_write+0x18/0x20 [ 33.762116][ T447] ? mutex_lock+0x97/0x1d0 [ 33.762132][ T447] ? __cfi_mutex_lock+0x10/0x10 [ 33.762147][ T447] ? __fget_files+0x2c5/0x340 [ 33.762160][ T447] ksys_read+0x145/0x260 [ 33.762176][ T447] ? __cfi_ksys_read+0x10/0x10 [ 33.762192][ T447] ? __kasan_check_read+0x15/0x20 [ 33.762208][ T447] __x64_sys_read+0x7f/0x90 [ 33.762224][ T447] x64_sys_call+0x2638/0x2ee0 [ 33.762240][ T447] do_syscall_64+0x57/0xf0 [ 33.762253][ T447] ? clear_bhb_loop+0x50/0xa0 [ 33.762269][ T447] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.762283][ T447] RIP: 0033:0x7f98c075d60e [ 33.762295][ T447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.762305][ T447] RSP: 002b:00007f98c172cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.762320][ T447] RAX: ffffffffffffffda RBX: 00007f98c172d6c0 RCX: 00007f98c075d60e [ 33.762330][ T447] RDX: 000000000000000f RSI: 00007f98c172d0a0 RDI: 0000000000000004 [ 33.762338][ T447] RBP: 00007f98c172d090 R08: 0000000000000000 R09: 0000000000000000 [ 33.762346][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.762354][ T447] R13: 00007f98c0a16038 R14: 00007f98c0a15fa0 R15: 00007ffff6ce5988 [ 33.762364][ T447] [ 33.916308][ T456] fuse: Unknown parameter 'fd0x0000000000000003' [ 33.970466][ T457] overlayfs: failed to resolve './file2': -2 [ 34.031131][ T459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=459 comm=syz.2.64 [ 34.068871][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 34.068889][ T36] audit: type=1400 audit(1777134902.430:146): avc: denied { create } for pid=462 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.095618][ T36] audit: type=1400 audit(1777134902.430:147): avc: denied { ioctl } for pid=462 comm="syz.2.66" path="socket:[3845]" dev="sockfs" ino=3845 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.123498][ T36] audit: type=1400 audit(1777134902.460:148): avc: denied { setopt } for pid=462 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.162694][ T36] audit: type=1400 audit(1777134902.520:149): avc: denied { read } for pid=472 comm="syz.2.70" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.183749][ T36] audit: type=1400 audit(1777134902.520:150): avc: denied { open } for pid=472 comm="syz.2.70" path="net:[4026532467]" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.216076][ T36] audit: type=1400 audit(1777134902.520:151): avc: denied { bind } for pid=472 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.238875][ T478] rust_binder: Read failure Err(EAGAIN) in pid:66 [ 34.248141][ T481] fuse: Unknown parameter 'fd0x0000000000000003' [ 34.261563][ T481] overlayfs: failed to resolve './file2': -2 [ 34.263854][ T483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=483 comm=syz.1.74 [ 34.328149][ T485] Zero length message leads to an empty skb [ 34.340145][ T492] FAULT_INJECTION: forcing a failure. [ 34.340145][ T492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.353333][ T492] CPU: 0 UID: 0 PID: 492 Comm: syz.1.78 Not tainted syzkaller #0 0f3775a9ea948f8f8f06e34e337f4a1c8395b27e [ 34.353364][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.353375][ T492] Call Trace: [ 34.353381][ T492] [ 34.353389][ T492] __dump_stack+0x21/0x30 [ 34.353418][ T492] dump_stack_lvl+0x140/0x1c0 [ 34.353441][ T492] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.353466][ T492] dump_stack+0x19/0x20 [ 34.353488][ T492] should_fail_ex+0x3d7/0x530 [ 34.353512][ T492] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 34.353543][ T492] should_fail+0xf/0x20 [ 34.353566][ T492] should_fail_usercopy+0x1e/0x30 [ 34.353593][ T492] _copy_to_user+0x24/0xa0 [ 34.353611][ T492] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 34.353637][ T492] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3b9e/0x5c20 [ 34.353670][ T492] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 34.353698][ T492] ? save_stack+0x149/0x240 [ 34.353719][ T492] ? free_contig_range+0x260/0x260 [ 34.353746][ T492] ? __reset_page_owner+0x450/0x450 [ 34.353766][ T492] ? stack_trace_save+0xaa/0x100 [ 34.353785][ T492] ? post_alloc_hook+0x37d/0x3b0 [ 34.353806][ T492] ? prep_new_page+0x2d/0x190 [ 34.353826][ T492] ? get_page_from_freelist+0x496e/0x4a20 [ 34.353851][ T492] ? __alloc_pages_noprof+0x35f/0x7e0 [ 34.353874][ T492] ? alloc_slab_page+0x6b/0x1e0 [ 34.353903][ T492] ? allocate_slab+0x69/0x420 [ 34.353923][ T492] ? __kasan_check_write+0x18/0x20 [ 34.353950][ T492] ? __update_page_owner_handle+0x318/0x370 [ 34.353974][ T492] ? __kasan_check_write+0x18/0x20 [ 34.354000][ T492] ? __set_page_owner+0x3fe/0x600 [ 34.354021][ T492] ? __kasan_check_write+0x18/0x20 [ 34.354047][ T492] ? __cfi___set_page_owner+0x10/0x10 [ 34.354069][ T492] ? kasan_unpoison+0x4a/0x70 [ 34.354096][ T492] ? post_alloc_hook+0x37d/0x3b0 [ 34.354118][ T492] ? __cfi_post_alloc_hook+0x10/0x10 [ 34.354140][ T492] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 34.354169][ T492] ? _raw_spin_trylock+0xb5/0x140 [ 34.354192][ T492] ? __cfi__raw_spin_trylock+0x10/0x10 [ 34.354218][ T492] ? is_bpf_text_address+0x17b/0x1a0 [ 34.354246][ T492] ? kernel_text_address+0xa9/0xe0 [ 34.354278][ T492] ? __kernel_text_address+0x11/0x40 [ 34.354301][ T492] ? unwind_get_return_address+0x51/0x90 [ 34.354332][ T492] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.354353][ T492] ? arch_stack_walk+0x10a/0x170 [ 34.354387][ T492] ? is_bpf_text_address+0x17b/0x1a0 [ 34.354413][ T492] ? kernel_text_address+0xa9/0xe0 [ 34.354438][ T492] ? unwind_get_return_address+0x51/0x90 [ 34.354460][ T492] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.354484][ T492] ? stack_depot_save_flags+0x38/0x800 [ 34.354512][ T492] ? stack_trace_save+0xaa/0x100 [ 34.354533][ T492] ? kasan_save_track+0x4f/0x80 [ 34.354551][ T492] ? kasan_save_track+0x3e/0x80 [ 34.354568][ T492] ? kasan_save_alloc_info+0x40/0x50 [ 34.354593][ T492] ? __kasan_slab_alloc+0x73/0x90 [ 34.354612][ T492] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 34.354640][ T492] ? security_inode_alloc+0x51/0x230 [ 34.354660][ T492] ? inode_init_always_gfp+0x756/0x9e0 [ 34.354679][ T492] ? alloc_inode+0xc5/0x270 [ 34.354698][ T492] ? new_inode+0x25/0x1e0 [ 34.354718][ T492] ? proc_pid_make_inode+0x25/0x140 [ 34.354737][ T492] ? proc_pident_instantiate+0x6d/0x2c0 [ 34.354756][ T492] ? proc_pident_lookup+0x1c7/0x270 [ 34.354775][ T492] ? proc_tid_base_lookup+0x2f/0x40 [ 34.354800][ T492] ? do_filp_open+0x1f5/0x440 [ 34.354824][ T492] ? avc_has_perm_noaudit+0x26c/0x360 [ 34.354855][ T492] ? __asan_memcpy+0x5a/0x80 [ 34.354889][ T492] ? avc_has_perm_noaudit+0x28a/0x360 [ 34.354919][ T492] ? avc_has_perm+0x155/0x240 [ 34.354948][ T492] ? __cfi_avc_has_perm+0x10/0x10 [ 34.354977][ T492] ? kasan_save_alloc_info+0x40/0x50 [ 34.355004][ T492] ? selinux_file_open+0x46c/0x630 [ 34.355030][ T492] ? __cfi_selinux_file_open+0x10/0x10 [ 34.355059][ T492] ? avc_has_extended_perms+0x80b/0xe70 [ 34.355088][ T492] ? __asan_memcpy+0x5a/0x80 [ 34.355114][ T492] ? avc_has_extended_perms+0x969/0xe70 [ 34.355145][ T492] ? __asan_set_shadow_00+0x12/0x20 [ 34.355169][ T492] ? do_vfs_ioctl+0x182d/0x2010 [ 34.355189][ T492] ? arch_stack_walk+0x10a/0x170 [ 34.355217][ T492] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 34.355239][ T492] ? _parse_integer+0x2e/0x40 [ 34.355266][ T492] ? ioctl_has_perm+0x39a/0x500 [ 34.355292][ T492] ? has_cap_mac_admin+0xd0/0xd0 [ 34.355318][ T492] ? proc_fail_nth_write+0x184/0x220 [ 34.355342][ T492] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 34.355368][ T492] ? selinux_file_ioctl+0x732/0x1480 [ 34.355394][ T492] ? vfs_write+0x9a4/0xf90 [ 34.355421][ T492] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 34.355447][ T492] ? __cfi_vfs_write+0x10/0x10 [ 34.355475][ T492] ? __kasan_check_write+0x18/0x20 [ 34.355502][ T492] ? mutex_unlock+0x90/0x240 [ 34.355528][ T492] ? __cfi_mutex_unlock+0x10/0x10 [ 34.355555][ T492] ? __fget_files+0x2c5/0x340 [ 34.355575][ T492] ? __fget_files+0x2c5/0x340 [ 34.355594][ T492] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.355615][ T492] ? security_file_ioctl+0x3e/0x110 [ 34.355640][ T492] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 34.355669][ T492] __se_sys_ioctl+0x132/0x1b0 [ 34.355690][ T492] __x64_sys_ioctl+0x7f/0xa0 [ 34.355709][ T492] x64_sys_call+0x1878/0x2ee0 [ 34.355737][ T492] do_syscall_64+0x57/0xf0 [ 34.355759][ T492] ? clear_bhb_loop+0x50/0xa0 [ 34.355785][ T492] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.355808][ T492] RIP: 0033:0x7f64c519cdd9 [ 34.355827][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.355844][ T492] RSP: 002b:00007f64c6013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.355868][ T492] RAX: ffffffffffffffda RBX: 00007f64c5415fa0 RCX: 00007f64c519cdd9 [ 34.355892][ T492] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000003 [ 34.355906][ T492] RBP: 00007f64c6013090 R08: 0000000000000000 R09: 0000000000000000 [ 34.355919][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.355932][ T492] R13: 00007f64c5416038 R14: 00007f64c5415fa0 R15: 00007ffe94303c08 [ 34.355948][ T492] [ 34.707920][ T502] fuse: Unknown parameter 'fd0x0000000000000003' [ 34.750171][ T504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=504 comm=syz.1.84 [ 34.760297][ T502] overlayfs: failed to resolve './file2': -2 [ 34.796151][ T36] audit: type=1400 audit(1777134903.150:152): avc: denied { read } for pid=507 comm="syz.1.86" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.805955][ T383] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.809528][ T36] audit: type=1400 audit(1777134903.150:153): avc: denied { open } for pid=507 comm="syz.1.86" path="/33/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.977351][ T383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.985783][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 34.992127][ T36] audit: type=1400 audit(1777134903.190:154): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.085925][ T383] usb 1-1: config 114 has an invalid interface number: 20 but max is 0 [ 35.094709][ T383] usb 1-1: config 114 has no interface number 0 [ 35.102865][ T383] usb 1-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 35.115224][ T383] usb 1-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 35.125520][ T383] usb 1-1: config 114 interface 20 altsetting 232 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.139044][ T383] usb 1-1: config 114 interface 20 has no altsetting 0 [ 35.147227][ T383] usb 1-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2d.ac [ 35.155917][ T9] usb 3-1: device descriptor read/64, error -71 [ 35.156873][ T383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.171238][ T383] usb 1-1: Product: syz [ 35.175401][ T383] usb 1-1: Manufacturer: syz [ 35.180078][ T383] usb 1-1: SerialNumber: syz [ 35.186918][ T496] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 35.395431][ T36] audit: type=1400 audit(1777134903.750:155): avc: denied { bind } for pid=495 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.398683][ T9] usb 3-1: device descriptor read/64, error -71 [ 35.519930][ T383] pl2303 1-1:114.20: required endpoints missing [ 35.527982][ T383] usb 1-1: USB disconnect, device number 2 [ 35.656043][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 35.678159][ T528] FAULT_INJECTION: forcing a failure. [ 35.678159][ T528] name failslab, interval 1, probability 0, space 0, times 0 [ 35.690945][ T528] CPU: 0 UID: 0 PID: 528 Comm: syz.1.93 Not tainted syzkaller #0 0f3775a9ea948f8f8f06e34e337f4a1c8395b27e [ 35.690977][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.690989][ T528] Call Trace: [ 35.690997][ T528] [ 35.691005][ T528] __dump_stack+0x21/0x30 [ 35.691037][ T528] dump_stack_lvl+0x140/0x1c0 [ 35.691062][ T528] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.691088][ T528] ? cgroup_bpf_inherit+0x473/0x4d0 [ 35.691117][ T528] dump_stack+0x19/0x20 [ 35.691141][ T528] should_fail_ex+0x3d7/0x530 [ 35.691174][ T528] should_failslab+0xac/0x100 [ 35.691187][ T528] __kmalloc_cache_noprof+0x41/0x470 [ 35.691204][ T528] ? cgroup_mkdir+0xb5c/0x1570 [ 35.691218][ T528] cgroup_mkdir+0xb5c/0x1570 [ 35.691231][ T528] ? __cfi_cgroup_mkdir+0x10/0x10 [ 35.691244][ T528] kernfs_iop_mkdir+0x1c5/0x2d0 [ 35.691258][ T528] vfs_mkdir+0x585/0x820 [ 35.691278][ T528] do_mkdirat+0x240/0x530 [ 35.691291][ T528] ? __cfi_do_mkdirat+0x10/0x10 [ 35.691304][ T528] ? getname_flags+0x208/0x700 [ 35.691322][ T528] __x64_sys_mkdirat+0x8b/0xa0 [ 35.691335][ T528] x64_sys_call+0x2ba8/0x2ee0 [ 35.691351][ T528] do_syscall_64+0x57/0xf0 [ 35.691365][ T528] ? clear_bhb_loop+0x50/0xa0 [ 35.691381][ T528] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.691395][ T528] RIP: 0033:0x7f64c519cdd9 [ 35.691408][ T528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.691419][ T528] RSP: 002b:00007f64c6013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 35.691434][ T528] RAX: ffffffffffffffda RBX: 00007f64c5415fa0 RCX: 00007f64c519cdd9 [ 35.691444][ T528] RDX: 0000000000000010 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 35.691453][ T528] RBP: 00007f64c6013090 R08: 0000000000000000 R09: 0000000000000000 [ 35.691461][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.691469][ T528] R13: 00007f64c5416038 R14: 00007f64c5415fa0 R15: 00007ffe94303c08 [ 35.691479][ T528] [ 35.691557][ T528] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 35.906769][ T528] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 35.915288][ T528] CPU: 0 UID: 0 PID: 528 Comm: syz.1.93 Not tainted syzkaller #0 0f3775a9ea948f8f8f06e34e337f4a1c8395b27e [ 35.926577][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.936672][ T528] RIP: 0010:cgroup_mkdir+0x117f/0x1570 [ 35.942177][ T528] Code: eb 05 e8 34 4e 08 00 4c 89 ef e8 0c 9e 00 00 49 81 fd 01 f0 ff ff 0f 83 b3 fb ff ff 4d 8d b5 08 01 00 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 f2 bb 60 00 49 8b bd 08 01 00 00 [ 35.942340][ T530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=530 comm=syz.3.94 [ 35.961812][ T528] RSP: 0018:ffffc9000cf57c88 EFLAGS: 00010206 [ 35.961843][ T528] RAX: 8a61ac2c4cd5a400 RBX: 0000000000000021 RCX: ffff8881f6e3acc0 [ 35.961860][ T528] RDX: ffff88811818d680 RSI: ffff888119637000 RDI: ffff888100042000 [ 35.961875][ T528] RBP: ffffc9000cf57d30 R08: ffffffff81eeb13b R09: ffffffff8109e618 [ 35.961890][ T528] R10: ffffffff85a200e7 R11: ffffffff85c0012f R12: ffff88810872e820 [ 35.961905][ T528] R13: 0000000000000000 R14: 0000000000000108 R15: dffffc0000000000 [ 35.961920][ T528] FS: 00007f64c60136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.028899][ T528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.035527][ T528] CR2: 00007ffe94304000 CR3: 000000010fb9c000 CR4: 00000000003526b0 [ 36.043809][ T528] Call Trace: [ 36.047208][ T528] [ 36.050172][ T528] ? __cfi_cgroup_mkdir+0x10/0x10 [ 36.055236][ T528] kernfs_iop_mkdir+0x1c5/0x2d0 [ 36.060119][ T528] vfs_mkdir+0x585/0x820 [ 36.064482][ T528] do_mkdirat+0x240/0x530 [ 36.068863][ T528] ? __cfi_do_mkdirat+0x10/0x10 [ 36.073749][ T528] ? getname_flags+0x208/0x700 [ 36.078527][ T528] __x64_sys_mkdirat+0x8b/0xa0 [ 36.083307][ T528] x64_sys_call+0x2ba8/0x2ee0 [ 36.088035][ T528] do_syscall_64+0x57/0xf0 [ 36.092457][ T528] ? clear_bhb_loop+0x50/0xa0 [ 36.097146][ T528] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.103052][ T528] RIP: 0033:0x7f64c519cdd9 [ 36.107467][ T528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.127159][ T528] RSP: 002b:00007f64c6013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 36.135602][ T528] RAX: ffffffffffffffda RBX: 00007f64c5415fa0 RCX: 00007f64c519cdd9 [ 36.143585][ T528] RDX: 0000000000000010 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 36.151554][ T528] RBP: 00007f64c6013090 R08: 0000000000000000 R09: 0000000000000000 [ 36.159529][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.167593][ T528] R13: 00007f64c5416038 R14: 00007f64c5415fa0 R15: 00007ffe94303c08 [ 36.175586][ T528] [ 36.178609][ T528] Modules linked in: [ 36.182957][ T528] ---[ end trace 0000000000000000 ]--- [ 36.189259][ T528] RIP: 0010:cgroup_mkdir+0x117f/0x1570 [ 36.195075][ T528] Code: eb 05 e8 34 4e 08 00 4c 89 ef e8 0c 9e 00 00 49 81 fd 01 f0 ff ff 0f 83 b3 fb ff ff 4d 8d b5 08 01 00 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 f2 bb 60 00 49 8b bd 08 01 00 00 [ 36.215230][ T528] RSP: 0018:ffffc9000cf57c88 EFLAGS: 00010206 [ 36.221426][ T528] RAX: 8a61ac2c4cd5a400 RBX: 0000000000000021 RCX: ffff8881f6e3acc0 [ 36.230640][ T528] RDX: ffff88811818d680 RSI: ffff888119637000 RDI: ffff888100042000 [ 36.238733][ T528] RBP: ffffc9000cf57d30 R08: ffffffff81eeb13b R09: ffffffff8109e618 [ 36.246914][ T9] usb 3-1: device descriptor read/64, error -71 [ 36.253207][ T528] R10: ffffffff85a200e7 R11: ffffffff85c0012f R12: ffff88810872e820 [ 36.261275][ T528] R13: 0000000000000000 R14: 0000000000000108 R15: dffffc0000000000 [ 36.269317][ T528] FS: 00007f64c60136c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.278936][ T528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.285532][ T528] CR2: 00007ffe94304000 CR3: 000000010fb9c000 CR4: 00000000003526b0 [ 36.293571][ T528] Kernel panic - not syncing: Fatal exception [ 36.299810][ T528] Kernel Offset: disabled [ 36.304134][ T528] Rebooting in 86400 seconds..